Sherief Hammad

The issue allows attackers to cause a denial of service, resulting in a process crash, by sending malformed data to the XP Server TCP port.

The issue allows remote authenticated users to execute arbitrary code via several vulnerable functions, including the `attrib valid` function, `covert` function, `declare` statement, or a crafted query plan. Additionally, remote authenticated users with database owner or "sa" role privileges can execute arbitrary code via a crafted install java statement.